IN THE CLAIMS : 

Please amend claims 2, 3, 6, 14, 24-27, and 32-38 and cancel claims 1, 4, 5, 21, 
23, 28, 29, 30, and 31, without prejudice or disclaimer, as follows. 

1. (Cancelled) 

2. (Currently Amended) The-A^method of claim 1, further comprising: 
maintaining in a mobile communication system subscriber's location information: 
receiving a message from subscriber's user equipment said message indicating 

that an address of a certificate provisioning gateway for certificate issuance and delivery 
procedure in a visited network is requested by the subscriber's user equipment, the 
certificate provisioning gateway serving at least one certificate authority, receiving in the 
message from subscriber's user equ i pment further comprising the address of the 
certificate provisioning gateway; 

determining, in response to receiving the message, on the basis of the subscriber's 
location information, an address of the certificate provisioning gateway: 

checking whether or not the address which in the message indicat e d corresponds 
to the address determined on the basis of the location information; and 

if they do not correspond to each other, using the address determined on the basis 
of the location information. 
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3. (Currently Amended) -Fhe-A method of claim 1, further comprising: 
maintaining in a mobile communication system subscriber's location information; 
receiving a message from subscriber's user equipment, receiving further in the 

message comprising subscriber's location information and indicating that an address of a 
certificate provisioning gateway for certificate issuance and delivery procedure in a 
visited network is requested by the subscriber's user equipment, the certificate 
provisioning gateway serving at least one certificate authority ; 

checking , in response to receiving the message, whether or not the location 
information in the message corresponds to the location information maintained in the 
system; and 

using the maintained location information for determining the address of the 
certificate provisioning gateway if it— the maintained location information does not 
correspond to the location information in the message. 

4. (Cancelled) 

5. (Cancelled) 

6. (Currently Amended) A -The method of claim 24 , further comprising: 
authenticating the subscriber; and 
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transmitting during the subscriber authentication to the user equipment at least part 
of the information required for obtaining a certificate from a certificate issuance service 
in another network than a home network in a mobile communication system after the 
subscriber authentication, the part of the information including at least one from a group 
comprising an address of a-the certificate provisioning gateway via which the certificate 
issuance service is provided in the other network, the certificate provisioning gateway 
serving at least one certificate authority, a public key required for the certificate issuance 
service in the other network, and an indication of the protocol required for the certificate 
issuance service in the other network. 

7. (Previously Presented) The method of claim 6, further comprising: 
performing the authentication as an application level authentication. 

8. (Previously Presented) The method of claim 6, further comprising: 
utilizing said part of the information during a certificate issuance procedure after 

the authentication in a visited network by the user equipment. 

9. (Previously Presented) The method of claim 6, further comprising: 
transmitting in said part of the information location network specific information. 



10-12. (Cancelled) 
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13. (Previously Presented) The method of claim 6, further comprising, when said 
part of the information includes at least the address of the certificate provisioning 
gateway via which the certificate issuance service is provided, transmitting from the user 
equipment a certificate request to the certificate provisioning gateway. 

14. (Currently Amended) A -The method of claim 26 , farther comprising: 
authenticating a-the subscriber: 

receiving, from subscribers user equipment, a message relating to a certificate 
issuance s e rvice in another network than a home network in a mobile communication 
system; and 

transmitting, in response to the message, to the user equipment in a reply message 
at least part of information required for obtaining a certificate from the certificate 
issuance service in the other network, the part of the information including at least one 
from a group comprising an address of a certificate provisioning gateway via which the 
certificate issuance service is provided in the other network, the certificate provisioning 
gateway serving at least one certificate authority, a public key required for the certificate 
issuance service in the other network, and an indication of the protocol required for the 
certificate issuance service in the other network. 

15. (Previously Presented) The method of claim 14, further comprising: 
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transmitting the message and the reply message in an integrity protected channel. 



16. (Cancelled) 

17. (Previously Presented) The method of claim 14, further comprising, when said 
part of the information includes at least the address of the certificate provisioning 
gateway via which the certificate issuance service is provided, transmitting from the user 
equipment a certificate request to the certificate provisioning gateway. 

18-20. (Cancelled) 

21. (Cancelled) 

22. (Cancelled) 

23. (Cancelled) 

24. (Currently Amended) The-A_method of claim 1, further comprising: 
maintaining in a mobile communication system subscriber's location information; 
receiving a message from subscriber's user equipment, configuring the message te 

comprise comprising subscriber's location information and indicating that an address of a 
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certificate provisioning gateway for certificate issuance and delivery procedure in a 
visited network is requested by the subscriber's user equipment, the certificate 
provisioning gateway serving at least one certificate authority ; 

checkin g, in response to receiving the message, whether or not the location 
information in the message corresponds to the location information maintained in the 
system; 

if the maintained location information corresponds to the location information in 
the message, determining on the basis of the subscriber's location information the address 
of the certificate provisioning gateway: and 

if the maintained location information I t-does not correspond to the location 
information in the message, sending an error indication by using the maintained location 
information. 

25. (Currently Amended) The-Amethod of claim 1, further comprising: 
maintaining in a mobile communication system subscriber's location information: 
receiving a message from subscriber's user equipment, configuring the message to 
comprise comprising subscriber's location information and indicating that an address of a 
certificate provisioning gateway for certificate issuance and delivery procedure in a 
visited network is requested by the subscriber's user equipment, the certificate 
provisioning gateway serving at least one certificate authority ; 
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checkings in response to receiving; the message, whether or not the location 
information in the message corresponds to the location information maintained in the 
system; 

determining, on the basis of the subscriber's location information the address of 
the certificate provisioning gateway; if the location information in the message 
corresponds to the maintained location information; and 

using the location information in the message if the location information in the 
message j ^does not correspond to the maintained location information. 

26. (Currently Amended) : J^Amethod of claim 1, farther comprising: 

maintaining in a mobile communication system subscriber' s location information; 

receiving a message from subscriber's user equipment configuring the message te 
compris e comprising subscriber's location information and indicating that an address of a 
certificate provisioning gateway for certificate issuance and delivery procedure in a 
visited network is requested by the subscriber's user equipment the certificate 
provisioning gateway serving at least one certificate authority ; 

checking - in response to receiving the message, w hether or not the location 
information in the message corresponds to the location information maintained in the 
system; 
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if the location information in the message corresponds to the maintained location 
information, determining on the basis of the subscriber's location information the address 
of the certificate provisioning gateway: and 

if the location information in the message i t-does not correspond to the maintained 
location information, sending an error indication by using the location information in the 
message. 

27. (Currently Amended) A- The method of claim 25 . comprising: 
authenticating a-the subscriber: and 

transmitting after the authentication via an authenticated channel to subscriber's 
user equipment at least part of information required for a certificate issuance service in 
another network than a home network of the subscriber, said at least part of the 
information comprising containing information required for obtaining a certificate from 
the certificate issuance service in the other network. 

28. (Cancelled) 

29. (Cancelled) 

30. (Cancelled) 
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31. (Cancelled) 



32. (Currently Amended) ^Phe-certificate provisioning gateway of claim 28 , 
configured: to serve a certificate authority in a mobile communication system: to 
determine, in response to receiving from subscriber's user equipment a message 
indicating a request for an address of another certificate provisioning gateway for 
certificate issuance and delivery procedure, the message further comprising an address of 
the other certificate provisioning gateway, wherein the certificate provi s ioning gat e way i r, 
configured, in response to rec e iving in the message further an address of the others 
certificate provisioning gatewa y on the basis of subscriber's location information 
maintained in and obtained from the mobile communication system , to check whether or 
not the address which in the message indicated corresponds to the address determined on 
the basis of the location information; and if they do not correspond to each other, to s e lect 
use the address determined on the basis of the location information. 

33. (Currently Amended) : Phe-A.certificate provisioning gateway of claim 28, 
wherein the certificate provisioning gateway is configured : to serve a certificate authority 
in a mobile communication system; to check , in response to receiving from subscriber's 
user equipment a i**-4he-message comprising subscriber's location information and 
indicating a request for an address of another certificate provisioning gateway for 
certificate issuance and delivery procedure in a visited network , to check whether or not 
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the location information in the message corresponds to the — subscriber's location 
information maintained in and obtained from the system; and to use the maintained 
location information for determining the address of the other certificate provisioning 
gateway if it -the maintained location information does not correspond to the location 
information in the message. 

34. (Currently Amended) tte-A_certificate provisioning gateway of claim 28 , 
wherein the certificate provisioning gateway is configured : to serve a certificate authority 
in a mobile communication system; to check , in response to receiving m — from 
subscriber's user equipment t he-a message comprising subscriber's location information 
and indicating that an address of another certificate provisioning gateway for certificate 
issuance and delivery procedure in a visited network is requested, to check whether or not 
the location information in the message corresponds to the — subscriber's location 
information maintained in and obtained from t he system; if the location information in 
the message corresponds to the maintained location information, to determine an address 
of the other certificate provisioning gateway on the basis of the subscriber's location 
information: and if it -the maintained location information does not correspond to the 
location information in the message, to send an error indication by using the maintained 
location information. 
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35. (Currently Amended) : Fhe-A certificate provisioning gateway of claim 28, 
wher e in the certificate provisioning gat e way is configured : to serve a certificate authority 
in a mobile communication system: ? to check, in response to receiving from subscriber's 
user equipment a tf h-.tbe message comprising subscriber's location information and 
indicating a request for an address of another certificate provisioning gateway for 
certificate issuance and delivery procedure in a visited network , to check whether or not 
the location information in the message corresponds to the location information 
maintained in the system; and to use the location information in the message for 
determining the address of the other certificate provisioning gateway if * Mhe location 
information does not correspond to the maintained location information. 

36. (Currently Amended) : fte-A^certificate provisioning gateway of claim 28, 
whe r ein the certificate provisi o ning ga teway i s configured: — to serve a certificate 
authority in a mobile communication system: to check, in response to receiving from 
subscriber's user equipment a in th e message comprising subscriber's location 
information and indicating a request for an address of another certificate provisioning 
gateway for certificate issuance and delivery procedure in a visited network. , to check 
whether or not the location information in the message corresponds to the -subscriber's 
location information maintained in and obtained from the system; to determine on the 
basis of the subscriber's location information the address of the other certificate 
provisioning gateway, if the location information in the message corresponds to the 
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maintained location information; and if rt- the location information does not correspond to 
the maintained location information, to send an error indication by using the location 
information in the message. 

37. (Currently Amended) The method as claimed in claim 4-2, wherein a certificate 
authority is a trusted third party. 

38. (Currently Amended) The method as claimed in claim +2, wherein a 
certificate authority is a trusted third party and does not include an authorization, 
authentication and accounting server. 
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